Analysis

  • max time kernel
    152s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    02/11/2023, 21:07

General

  • Target

    NEAS.25e76f1b3464988fbbf649d19dc212c0_JC.pdf

  • Size

    38KB

  • MD5

    25e76f1b3464988fbbf649d19dc212c0

  • SHA1

    02b523ef5377e6a347cd7ac0ba5825a245bdd330

  • SHA256

    a8d256217c24a3ab6644e11106ee592017eb8818e70c43616acde28cbddfc13f

  • SHA512

    7471a5f39029ac2e26faa8b4ba0e683959e9182cb0cd7dd677b1cf2c9b4d05b5fd5099643e26123c63828a722d06678cf021ef9b3808049c46d534aca0e8d1bf

  • SSDEEP

    768:FzT9pnNPoJLbMqH483k1YMWV3iKl1MDf0QR1xwAlMcuTavOtbmqkbhVRJtz0Id:FvfWJLAAKyVn40QR1+AGDaEiqm7z7d

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.25e76f1b3464988fbbf649d19dc212c0_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2040

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6bb969787e02effdbf5385dd2696911b

          SHA1

          2f059a1569e96ed5e07c8d2d349848bb6ff32e23

          SHA256

          4405c766c39253a33baf0d03b3864d9ff30d430dfb5e690e3dd23888418dccf4

          SHA512

          0e02b2f6e5fcf07ea513c06b96856ab66efa0c2db9d200ae67a89a47225c0c22f2b11987ffa270aa85b0375af41fec016533e20111b3b9dccd72d03aba70216c